🤖Decentralized Identifiers (DIDs)

Decentralized Identifiers, or DIDs, can be thought of as unique usernames on the internet. They are distinctive identifiers that belong solely to you.

Absolutely, the concept of DIDs as unique identifiers on the internet is crucial for the success of SamaritanDB. While traditional usernames are unique within a specific application or platform, DIDs transcend these boundaries and provide a universal means of identification across the entire internet. Here's how this uniqueness and enforcement can be ensured:

1. Decentralization: DIDs are not tied to a single central authority or service. They are created and managed in a decentralized manner. This decentralization ensures that no single entity can control or monopolize DIDs. They can be generated and verified by anyone.

2. Cryptography: DIDs are secured through cryptographic mechanisms. They are associated with cryptographic keys, and only the entity with the corresponding private key can prove ownership of the DID. This cryptographic verification is a robust way to ensure uniqueness and authenticity.

3. Global Registry: While there isn't a single global registry for DIDs, various organizations and communities work together to maintain a decentralized public ledger of DIDs. This ledger helps prevent the issuance of duplicate DIDs and enhances trust in the uniqueness of each identifier.

4. Interoperability: DIDs are designed to work across different platforms and services. This interoperability further enforces their uniqueness. Whether you're interacting with social networks, financial institutions, or other online services, your DID remains consistent.

By adopting DIDs in SamaritanDB, we are not only ensuring the uniqueness of digital identities but also putting control back into the hands of users. It allows individuals to manage their online presence, control data access, and interact securely with various applications and services across the internet. This aligns perfectly with the goals and principles of SamaritanDB.

What are DIDs and why should we care?

Decentralized identifiers (DIDs) are globally-unique identifiers that enable verifiable, decentralized digital identity. A DID describes a particular entity e.g a person, application, creative piece etc. In contrast to typical, federated identifiers, DIDs have been designed so that they may be decoupled from centralized registries, identity providers, and certificate authorities.

They enable entities prove control over them by authenticating using cryptographic proofs such as digital signatures. They are secure, enabling only the controller, who has cryptographic access over them make use of them.

SamaritanDB leverages DID (Decentralized Identifier) technology in several key ways:

1. Unique Identification: DIDs are used to uniquely identify you as an entity on the internet. Each user is assigned a specific DID, ensuring that their online identity is distinct and cannot be easily replicated or impersonated.

2. Credential Management: DIDs allow you to associate various credentials and proofs of identity with your digital persona. These credentials could include things like digital certificates or attestations, which help prove your ownership of certain attributes or qualifications.

3. Data Association: Every piece of data stored on the internet that is related to you is associated with your DID. This association ensures that data is linked to your unique identity and can be easily managed and controlled.

4. Data and Credential Control: With DIDs, you have the capability to manage and control all the data and credentials associated with your digital identity. This means you have the authority to grant or deny access to your data and credentials, putting you in charge of your online presence and privacy.

DIDs in SamaritanDB serve as the cornerstone for uniquely identifying users, securing their credentials, and providing complete control over their digital data and identity on the internet.

SamaritanDB DID Structure

Within the SamaritanDB ecosystem, we've designed a straightforward and unified format for our Decentralized Identifiers (DIDs). This format is two-fold, catering to both individuals and applications, making it easy to distinguish and manage identities.

1. User DIDs: Individuals are represented using the did:sam:root format, followed by a unique identifier specific to each user. This structure ensures that every user within SamaritanDB has a distinct and easily identifiable DID.

2. Application DIDs: Applications, on the other hand, are identified by DIDs in the did:sam:apps format, similarly followed by a unique identifier. This clear differentiation streamlines the association of data and credentials, as well as the effective management of access rights for both users and applications.

The use of unique identifiers within these DIDs guarantees that each entity's identifier remains exclusive across the entire SamaritanDB ecosystem. This approach enhances clarity and precision in identity management, aligning perfectly with our mission to empower users and applications to take control of their digital identities and data.

Are we building our own DID scheme and implementation?

Not really. The SamaritanDB DID is a wrapper over the KILT DID which provides the implementation of standard DID in conformance with the w3 spec. We use the KILT DID implementation as much as we can and build extensions when we must.